PT-2016-2974 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to a memory corruption vulnerability in Microsoft Edge, specifically in the Chakra JavaScript engine, caused by a buffer overflow. This could allow a remote...

GNU tar（POINTYFEATHER） decompression path bypass vulnerability

Vulnerability analysis reference: http://paper.seebug.org/103/ Overview GNU tar' archiver can be tricked into extracting files and directories in the given destination, regardless of the path names specified on the command line. Description GNU tar' archiver attempts to avoid path traversal attac...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

Intel(R) HD Graphics 10 - Path Privilege Escalation

Document Title: =============== IntelR HD Graphics 10 - Path Privilege Escalation References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1981 Release Date: ============= 2016-11-02 Vulnerability Laboratory ID VL-ID: ==================================== 1981...

DllHijackAuditor 3.5 - Stack Overflow Vulnerability

DLL Hijack Auditor is the smart tool to Audit against the Dll Hijacking Vulnerability in any Windows application. This is one of the critical security issue affecting almost all Windows systems. Though most of the apps have been fixed, but still many Windows applications are susceptible to this...

VUPlayer 2.49 - (.pls) Buffer Overflow Vulnerability

VUPlayer is a freeware multi-format audio player for windows. Copy of the Vendor Homepage: http://vuplayer.com/vuplayer.php Technical Details & Description: ================================ The classic buffer overflow vulnerability is located in the software VUPlayer an attacker can manipulate th...

Aura Video Converter 1.6.3 DLL Hijacking

Document Title: =============== Aura Video Converter v1.6.3 - DLL Hijacking Exploit References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1965 Release Date: ============= 2016-10-04 Vulnerability Laboratory ID VL-ID: ==================================== 1965...

TYPO3 Frontend User Registration Remote Command Execution Vulnerability

TYPO3 is a free and open source content management system. A remote command execution vulnerability exists in TYPO3 Frontend User Registration. A remote attacker could exploit the vulnerability to execute arbitrary code within the context of the application. A successful attack would corrupt the...

Microsoft Windows GDI Memory Corruption Vulnerability

Microsoft Windows is a series of operating systems released by Microsoft Corporation in the U.S. Graphics Device Interface GDI is one of the graphics device interface components. A memory corruption vulnerability exists in the Graphics Device Interface in Microsoft Windows. A remote attacker coul...

Critical Flaws Found in Network Management Systems

Eleven critical vulnerabilities have been patched in network management systems NMS from four leading manufacturers: Cloudview, Netikus, Paessler and Opmantek. The flaws enable remote cross-site scripting and command-injection attacks. Public disclosure of the vulnerabilities coincided with a...

IpNetCam A107WIRF-HNH-03 IP-Camera 0.376.223 Authentication Bypass

IpNetCam A107WIRF-HNH-03 IP-Camera auth bypass configuration download Release: 0.376.223 Copyright 2016 c Todor Donev http://www.ethical-hacker.org/ https://www.facebook.com/ethicalhackerorg Disclaimer: This or previous programs is for Educational purpose ONLY. Do not use it without permission. T...

Nagios Network Analyzer 2.2.1 Cross Site Request Forgery

Credits: John Page -hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/NAGIOS-NA-v2.2.1-MULTIPLE-CSRF.txt + ISR: ApparitionSec Vendor: =============== www.nagios.com Product: ============================== Nagios Network Analyzer v2.2.1 Netflow...

S3 Boot Script Protection

Lenovo Security Advisory: LEN-2014-006 Potential Impact: Elevation of Privilege Severity: Medium Summary: Certain firmware implementations may not correctly protect memory that stores the BIOS S3 Boot Script when a system is suspended. Exploitation of such vulnerabilities could potentially lead t...

Philips Xper-IM Connect Vulnerabilities

OVERVIEW Independent researchers Mike Ahmadi of Synopsys and Billy Rios of Whitescope LLC, in collaboration with Philips, have identified numerous vulnerabilities with an automated software composition analysis tool in the Philips Xper-IM Connect system running on Windows XP. Philips reports that...

Windows GDI Information Disclosure Vulnerability

A Win32k information disclosure vulnerability exists when the Windows GDI component improperly discloses kernel memory addresses. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker...

The vulnerability in Microsoft Office Compatibility Pack allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Microsoft Lync Attendee User allows for the execution of code remotely. If a user entering the system has administrator privileges, a malicious individual can gain full control over the system. They can then install programs, view, modify, or delete data, as well as creat...

Adobe Flash Player Arbitrary Code Execution Vulnerability (CNVD-2016-04064)

Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A security vulnerability exists in Adobe Flash Player 21.0.0.242 and prior versions for Windows, Macintosh, Linux,...

Microsoft Office OLE DLL End Load Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A security vulnerability exists in Microsoft Office that originates from the program failing to properly...

Oracle MySQL Multiple Unspecified Vulnerabilities-11 (Jun 2016) - Linux

Oracle MySQL is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql";...

Memory Corruption Vulnerability in Multiple Adobe Products (CNVD-2016-03225)

Adobe Acrobat DC, etc. are the United States of America Auduby Adobe company's products. Acrobat DC is a desktop PDF solution; Acrobat Reader DC is a set of tools for viewing, printing and annotating PDF.Classic and Continuous are Acrobat DC and Acrobat Reader DC product download center provides...